scvhost.exe consumes high CPU and eats memory

[steve02a]

svchost.exe consumes high CPU and eats memory

I read the article on this site: how-to-fix-svchost-using-100-cpu-memory-leak

However, the solutions provided didn't help. I can go into task manager or process explorer and kill the process, but it comes back after 5 minutes to start eating memory.

No HP printer, so no HP software installed. Disabled automatic updates - no help (of course, can't run windows update w/that off either). Using the process explorer, I can see the child processes running under my psycho svchost.exe and one is telephony, but if I disable that - it disables the Remote Access Connection Monitor - which will in effect, boot you off the network and won't let you view the network or anything - so that's out of the question. There were a couple other child processes, but useless ones the computer or user didn't need so I disabled those services - however, the svchost.exe still pokes it head back to eat memory and hog up the CPU.

I have the Windows Agent v3 installed. I have KB927891 installed. Even created a new user account (w/admin). None of those solved the problem.

Needless to say - the computer is just useless. Takes 5 minutes to open IE because the CPU is 100% for one process. Can't really do much of anything on the computer. And for the user "Trusted IT Solutions" - yea, I ran AV and malware scans.

Does anyone have any other suggestions?

Thank you advance

(please keep smart ass remarks to yourself....I've gotten 3 of them already, but users go and delete their reply - but I still get a notification in email so I know what you say...)

 

[carrcomp]

I read the article on this site: how-to-fix-svchost-using-100-cpu-memory-leak

However, the solutions provided didn't help. I can go into task manager or process explorer and kill the process, but it comes back after 5 minutes to start eating memory.

No HP printer, so no HP software installed. Disabled automatic updates - no help (of course, can't run windows update w/that off either). Using the process explorer, I can see the child processes running under my psycho svchost.exe and one is telephony, but if I disable that - it disables the Remote Access Connection Monitor - which will in effect, boot you off the network and won't let you view the network or anything - so that's out of the question. There were a couple other child processes, but useless ones the computer or user didn't need so I disabled those services - however, the svchost.exe still pokes it head back to eat memory and hog up the CPU.

I have the Windows Agent v3 installed. I have KB927891 installed. Even created a new user account (w/admin). None of those solved the problem.

Needless to say - the computer is just useless. Takes 5 minutes to open IE because the CPU is 100% for one process. Can't really do much of anything on the computer.

Does anyone have any other suggestions?

Thank you advance

You're confused, or it's a typo.

scvhost is a virus, svchost is a valid process.

 

[steve02a]

Sorry...my mistake....TYPO....

svchost.....the actual windows process

 

[Xander]

On whose computer is this happening? Yours or a customers?

 

[steve02a]

This is on a client computer. Windows XP w/SP3 and all the latest updates through April 2012.

 

[Encrypted Existence]

Have a look at this...

http://www.technibble.com/forums/showthread.php?t=1247

And for all those viewing the only reason that I am posting this is because the gentleman who started this thread PM'd me because I previously posted in this thread (but deleted the post as he references) and stated that this seems pretty basic for an IT pro of 25 years. I also asked him if he had even scanned for malware yet which he had not mentioned whether he had or not in the first ( unedited) post.

"Examples of good questions include most of the following:
- What were you trying to do?
- What have you tried already, and what happened as a result?
- What was the exact error message you received?
- How long have you been experiencing this problem?
- Have you recently installed or uninstalled any software or hardware?
- What changes have occured on the system between the time everything was working and when you noticed the problem

Dont let us assume, tell us right at the beginning. In return you are more likely to get the right answer quicker."

 

[Encrypted Existence]

I would like to apologize to Steve02a and the rest of the members of the forum for how I have acted and the things i have said in this thread and in my original post(in this thread). I feel my posts have been inappropriate and rude. I am sorry Steve.

 

[steve02a]

I would like to apologize to Steve02a and the rest of the members of the forum for how I have acted and the things i have said in this thread and in my original post(in this thread). I feel my posts have been inappropriate and rude. I am sorry Steve.

Thank you kindly sir. Everything is fine. We'll relax, share ideas and collaborate together. That's why we are here. We're professionals and here for a purpose - to seek answers and provide answers. And I'll be the 1st to admit - even as a support provider for a long time, I still need support too. Thank you for your apology...let's all move on and keep the support going....Thanks.

 

[Jamie]

Turn off Microsoft update and use windows update only. Seen that fix the issue on several machines

 

[steve02a]

Turn off Microsoft update and use windows update only. Seen that fix the issue on several machines

Isn't MS Update the successor for Windows Update - whereas Windows update only did the OS and MS update did non-OS updates, but now they are combined? But I know on a clean install of Windows, the first update you do is just Windows Update and later you can include MS update (when you have other MS products installed) and it'll install something (something I've never found to make it switch over). So....how do you turn off MS update and use windows update only? I'll have to try that tomorrow when the user lets me back on her computer....

 

[Secc]

Hi Steve02a, Maybe this could help to see what its running:

http://svchostviewer.codeplex.com/

or this:

http://technet.microsoft.com/en-us/sysinternals/bb896653
Secc

 

[steve02a]

Good ol process explorer. Has helped me many times in the past. Actually been using that on the client computer but hasn't helped me pinpoint the issue. I'll have to get a list of all the child processes running and post it here. Some were services which I disabled but that didn't work. Two were services which I disabled, but then caused the computer to disconnect from the network so I had to turn those back on. I'll keep investigating...

 

[Peaceful]

By any chance is this a dell computer? If so try uninstalling all the dell crap.

 

[steve02a]

Actually, yes, it is a dell and has that stupid Dell service center running. I'll have to get rid of that and see how the computer behaves...

 

[Parkwaytech]

I know you mentioned that it had no HP printers, but we had this happen with the printer driver for a network copier on one machine. I imagine you've already checked those things, but wanted to pass along what had happened to me. Took me three frustrating days to find out that driver was the problem.

 

[steve02a]

I'll have to check out the drivers. Pretty simple machine. One network printer, one medical application installed, Office 2003, and Norton Security Suite.

I've attached a screen shot too of the crazy process out of control.

 

[kevinjhaag]

How about uninstalling Norton stuff and see how it acts after that. It would not be the only problem I've seen caused by it.

 

[steve02a]

By any chance is this a dell computer? If so try uninstalling all the dell crap.

This solved the problem. That stupid Dell Service Center was the cause of the problem. After I uninstalled it - the computer has been normal since then. So, thank you very much Peaceful! Thanks to everyone for your input too...

 

[atlanticjim]

Thanks to the OP for posting the solution for our benefit.